Cryptographic Key & S-Box CarverAES / ChaCha20 / RSA / RC4
In-memory cryptographic structure carving engine: scans process heaps and stacks for AES round schedules, ChaCha20 state matrices, RSA ASN.1 DER keys, and RC4 permutations with live victim decryption.
Process Dump:
Memory Scanned
128.4 MB4,096 pgs
Heap & Stack mapped
Structures Identified
4100% Match
Entropy > 7.8 verified
AES Round Schedules
111 Rounds
AES-128 KeyExpansion
Stream Cipher States
2RC4 / ChaCha
KSA inverted
RSA Keypairs
12048-bit
PKCS#1 DER Parsed
Decryption Ready
3 / 3Armed
Victim payload restore
4 Found
AES Key Schedule
AES-128-CBCLocation:0x00A4F820 (Heap)
Entropy:7.940 / 8.0
Key: 2b 7e 15 16 28 ae d2 a6 ab f7 15 88 09 cf 4f 3c
Identified 11-round Rijndael KeyExpansion matrix in tasksche.exe heap with valid Rcon substitution sequence (0x01..0x36).
RC4 Permutation S-Box
RC4Location:0x0045E100 (.data Section)
Entropy:7.999 / 8.0
Key: 73 69 6b 6f 6d 6f 64 65
Found full 256-byte bijective identity permutation table S[0..255] in Nim runtime data section. KSA inversion solved passphrase.
ChaCha20 State Matrix
ChaCha20Location:0x019FF340 (Stack)
Entropy:7.820 / 8.0
Key: 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f
Detected standard 4x4 ChaCha20 constant matrix 'expand 32-byte k' (0x61707865, 0x3320646e, 0x79622d32, 0x6b206574) in thread stack.
RSA Private Key DER
RSA-2048Location:0x02B811A0 (Injected RWX)
Entropy:7.980 / 8.0
Key: 30 82 04 a4 02 01 00 02 82 01 01 00 c7 e5 f9 a1 44 8b 21 09 ...
Extracted full ASN.1 PKCS#1 DER RSAPrivateKey structure containing modulus n, public exponent e (65537), and private factors (d, p, q, dP, dQ, qInv).
AES Key Schedule Inspector(AES-128-CBC)
Memory Base: 0x00A4F820 • Segment: HeapExtracted Master Key & IV
2b 7e 15 16 28 ae d2 a6 ab f7 15 88 09 cf 4f 3c
ASCII Representation: "+~..(....?.?..."
IV (Initialization Vector): 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f
AES-128 Expanded Key Schedule Matrix (11 Rounds, 176 Bytes)Rijndael KeyExpansion Verified
| Round | Round Key Words (W[4*i] .. W[4*i+3]) | Rcon Constant |
|---|---|---|
| Round 0 | 2b7e1516 28aed2a6 abf71588 09cf4f3c | Initial Master Key |
| Round 1 | a0fafe17 88542cb1 23a33939 2a6c7605 | 0x01 (Round 1) |
| Round 2 | f2c295f2 7a96b943 5935807a 7359f67f | 0x02 (Round 2) |
| Round 3 | 3d80477d 4716fe3e 1e237e44 6d7a883b | 0x04 (Round 3) |
| Round 4 | ef44a541 a8525b7f b671253b db0bad00 | 0x08 (Round 4) |
| Round 5 | d4d1c6f8 7c839d87 caf2b8bc 11f915bc | 0x10 (Round 5) |
| Round 6 | 6d88a37a 110b3efd dbf98641 ca0093fd | 0x20 (Round 6) |
| Round 7 | 4e54f70e 5f5fc9f3 84a64fb2 4ea6dc4f | 0x40 (Round 7) |
| Round 8 | ead27321 b58dbad2 312bf560 7f8d292f | 0x80 (Round 8) |
| Round 9 | ac7766f3 19fadc21 28d12941 575c006e | 0x1B (Round 9) |
| Round 10 | d014f9a8 c9ee2589 e13f0cc8 b6630ca6 | 0x36 (Round 10 Final) |